On Thu, Mar 4, 2010 at 12:11 PM, Doug Burks <mub...@gmail.com> wrote:
> As I mentioned in my previous message, ossec-logtest takes about 3 > minutes before it will accept input. During this time, it is stuck at > 100% CPU usage. ossec-analysisd does the same thing when starting > OSSEC. After the 3 minutes is up, ossec-analysisd settles down to > about 30% CPU usage. > > .... > 2010/03/04 13:59:55 ossec-syscheckd: INFO: Starting syscheck database > (pre-scan). > 2010/03/04 14:02:41 ossec-syscheckd: INFO: Finished creating syscheck > database (pre-scan completed). > > Is this normal? > > Thanks, > Doug Burks > The majority of the time is being spent starting the syscheck database. Google seems to have a few results of OSSEC start logs that show around a 3 minute start as well. -- Thx Joshua Gimer
